Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
File:                     dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json)
Hash identifier:          vao3fqEyhxNrZKTgYobPtxUiaVWzQPjK+VdOVvzMMTI=
Subject key identifier:   AE:6D:6F:8D:09:E0:8C:C0:4E:C7:75:5B:03:42:63:3B:22:A2:6D:ED
Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
Certificate issuer:       /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
Manifest number:          046F
Signing time:             Sun 05 May 2024 01:50:33 +0000
Manifest this update:     Sun 05 May 2024 01:50:33 +0000
Manifest next update:     Sun 12 May 2024 01:50:33 +0000
Files and hashes:         1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: Ki6ApEY+LBPZimnj9izTc8SeTpIqyjDZDhr5YaLC+9k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
                          rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
        Validity
            Not Before: May  5 01:50:33 2024 GMT
            Not After : May 12 01:50:33 2024 GMT
        Subject: CN=6636e5e9-b999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:d9:8e:a1:4a:3e:fd:c7:1e:3d:0a:9c:78:
                    b4:f1:1d:1d:fe:92:90:8e:42:8a:c2:29:c3:ab:40:
                    8c:80:e5:54:9a:09:35:be:6d:60:7c:ba:09:1b:74:
                    18:d5:aa:bc:df:bb:aa:63:4a:76:02:dc:df:a7:da:
                    06:7e:7b:95:31:92:7d:29:5b:1d:9d:29:b2:2c:aa:
                    24:40:69:8c:9d:4a:0a:49:59:89:e9:7b:24:12:31:
                    8b:59:e4:d5:cc:73:c7:fe:c5:fc:a1:78:6d:90:18:
                    d7:18:a6:27:0f:fa:de:64:bc:7b:be:a2:59:96:13:
                    3a:41:48:a6:2f:f3:19:9f:d4:01:13:3b:7f:40:3f:
                    c1:ad:0e:9a:f0:7e:a2:7a:b6:8c:a2:00:b1:69:3a:
                    1c:55:78:f2:09:78:3a:4a:44:93:92:b5:17:13:1d:
                    ad:a7:35:63:93:99:21:50:99:2e:3e:e9:29:33:9e:
                    50:c3:e2:83:50:65:83:ea:a1:ec:52:27:14:65:cf:
                    fe:50:b5:6d:ee:07:46:d9:e5:57:01:93:b5:45:19:
                    07:f7:2d:8c:49:d7:44:46:94:a9:42:57:12:4b:da:
                    9e:20:a6:48:63:3d:4e:a9:2d:4e:51:7d:9a:c6:6a:
                    8a:37:b1:af:31:5a:0e:63:5a:2e:c3:99:cb:ab:d3:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6D:6F:8D:09:E0:8C:C0:4E:C7:75:5B:03:42:63:3B:22:A2:6D:ED
            X509v3 Authority Key Identifier:
                keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:15:24:f4:d7:2b:8e:66:0d:97:fc:e1:5b:11:a7:23:47:06:
         f4:ea:17:d0:22:50:f3:1e:50:5d:30:24:8f:44:9f:30:b7:aa:
         db:3e:93:0e:42:57:2c:5d:ba:88:ff:ad:41:a9:0d:8f:a4:a9:
         7b:a7:e6:29:f5:81:04:c3:69:c1:28:ef:6f:e2:8f:4a:a2:4c:
         22:12:db:9a:87:74:56:03:9b:c8:6b:ab:c1:36:8e:9f:18:ae:
         3e:6c:84:2f:f7:07:4d:ab:b2:b7:41:fc:c1:fe:4b:92:1e:3b:
         06:08:67:96:f0:ab:48:ec:a4:1f:60:a9:12:8e:0f:7b:33:86:
         56:88:e4:6d:42:a3:d6:04:15:02:a2:cc:f3:81:52:87:62:ed:
         dc:16:7c:dc:00:03:f8:ec:75:f7:96:32:73:fe:1a:50:ac:ac:
         05:59:79:d3:27:18:12:1b:5e:0b:3e:16:95:df:8a:cc:90:25:
         d2:4e:b5:b3:c9:e6:6f:3e:ae:73:b6:d3:8a:6b:1b:a2:1f:8f:
         c4:db:bd:8d:bf:38:79:6f:1e:8d:61:6a:ed:cc:c5:f8:7d:ac:
         0f:7f:d8:04:59:fe:14:c5:ee:ad:78:6b:e1:d3:e3:d2:97:e1:
         d5:5d:1e:4e:85:ad:71:68:3d:37:9a:6f:ae:28:92:05:51:34:
         ff:9f:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:09:58 2024 by rpki-client on console-ams.rpki-client.org